- Ethereum’s ecosystem working group has introduced the open standard Clear Signing to address “blind” transaction signing issues.
- The initiative is backed by major players like Ethereum Foundation, Ledger, MetaMask, Trezor, and WalletConnect.
- Clear Signing is built on the WYSIWYS principle: “What You See Is What You Sign.”
Introduction to Clear Signing: A New Standard for Secure Transactions
In a significant move towards enhancing security in the cryptocurrency world, an Ethereum ecosystem working group unveiled a new open standard known as Clear Signing. This initiative aims to combat the prevalent issue of “blind” transaction signing and is supported by prominent names in the industry, including the Ethereum Foundation, Ledger, MetaMask, Trezor, and WalletConnect.
The Problem with Blind Signing
Blind signing has long been a security concern within Ethereum transactions. Often users confirm transactions without fully understanding their details due to complicated or technical data presentations in wallets. This can lead to vulnerabilities that have been exploited in many large-scale cyberattacks on crypto services and users. Even when attacks begin with phishing or infrastructure compromise, they often culminate in users unknowingly confirming malicious transactions.
A New Approach: WYSIWYS Principle
The Clear Signing standard introduces a novel approach based on the WYSIWYS principle — “What You See Is What You Sign.” This concept seeks to make the transaction confirmation process transparent and comprehensible for users. By doing so, it transforms signing into an effective asset protection mechanism.
Key Components of Clear Signing
To implement this approach effectively, several key components have been established:
– **ERC-7730**: A standard for structured transaction descriptions.
– **Registry**: A system for storing and distributing these descriptions.
– **Verification Mechanism**: An independent process to ensure accuracy.
– **Developer Tools**: Resources available for application and wallet developers.
The initiative ensures that anyone can contribute transaction descriptions to the system. Independent auditors will verify their accuracy while wallets decide which sources they trust.
Support from Trillion Dollar Security Initiative
The Ethereum Foundation’s Trillion Dollar Security Initiative plays a vital role in supporting infrastructure development for this approach. Furthermore, a portal called clearsigning.org provides integration tools such as libraries on Rust and TypeScript to facilitate widespread adoption.
Collaboration Across the Ecosystem
The development of this standard sees collaboration from various entities including ZKnox, Sourcify, Cyfrin, Zama, WalletConnect, Fireblocks, Trezor, Keycard, MetaMask, Argot along with individual participants from within the Ethereum ecosystem. Notably contributing was Ledger which played an integral role in creating ERC-7730 as well as early Clear Signing infrastructure.
As we look towards future developments outlined by Ethereum Foundation earlier this year targeting 2026 goals; initiatives like these demonstrate proactive steps towards safeguarding user assets while fostering confidence among cryptocurrency enthusiasts globally.
